Method for directly transmitting electronic coin datasets between terminals, payment system, protection system and monitoring entity

Abstract

The invention relates to a payment system and a method for directly transmitting electronic coin datasets between terminals, wherein a monitoring entity registers anonymous masked electronic coin datasets. The method has the following steps in a first terminal; receiving an electronic coin dataset, said at least one electronic coin dataset having a monetary value and a concealment value; masking a modified electronic coin dataset or the received electronic coin dataset by applying a one-way function to the electronic coin dataset in order to obtain a masked electronic coin dataset; linking the masked electronic coin dataset to a pseudonym in order to obtain a pseudonymized masked electronic coin dataset, and transmitting the pseudonymized masked electronic coin dataset to the monitoring entity.

1 .- 14 . (canceled) 
     
     
         15 . A method for directly transmitting electronic coin datasets between terminals,
 wherein a monitoring entity registers anonymous masked electronic coin datasets, comprising the following steps in a first terminal;   receiving an electronic coin dataset, the at least one electronic coin dataset having a monetary value and a concealment value;   masking a modified electronic coin dataset or the received electronic coin dataset by applying a one-way function to the electronic coin dataset, to its concealment value in order to obtain a masked electronic coin dataset;   linking the masked electronic coin dataset to a pseudonym in order to obtain a pseudonymized masked electronic coin dataset; and   sending the pseudonymized masked electronic coin dataset to the monitoring entity.   
     
     
         16 . The method according to  claim 15 , wherein the number of range confirmations or range proofs that the monitoring entity requests from the first terminal is reduced by the sending of the pseudonymized masked electronic coin dataset instead of an anonymous masked electronic coin dataset. 
     
     
         17 . The method according to  claim 15 , comprising the further steps in the first terminal:
 receiving a request for a sum range confirmation or a sum range proof from the monitoring entity; and   sending the requested sum range confirmation or the requested sum range proof to the monitoring entity.   
     
     
         18 . The method according to  claim 15 , comprising the further steps in the first terminal:
 creating an unsolicited sum range confirmation or an unsolicited sum range proof, and   sending the unsolicited sum range confirmation or the requested sum range proof to the monitoring entity.   
     
     
         19 . The method according to  claim 15 , wherein the first terminal forms a sum of monetary values of multiple electronic coin datasets, and
 wherein the first terminal confirms with the sum range confirmation that the formed sum is in a range.   
     
     
         20 . The method according to  claim 15 , wherein the first terminal creates a sum range proof for multiple electronic coin datasets which can be checked by the monitoring entity. 
     
     
         21 . The method according to  claim 19 , wherein the multiple electronic coin datasets comprise only selected electronic coin datasets, including
 only electronic coin datasets of sent pseudonymized masked electronic coin datasets, or   only electronic coin datasets of sent anonymous masked electronic coin datasets or sent pseudonymized masked electronic coin datasets, or   only electronic coin datasets of sent anonymous masked electronic coin datasets, sent pseudonymized masked electronic coin datasets and/or masked electronic coin datasets not sent to the monitoring entity.   
     
     
         22 . The method according to  claim 19 , wherein the multiple electronic coin datasets are selected according to at least one of the following criteria:
 a preselected time period, and/or   a list in the first terminal or in the monitoring entity.   
     
     
         23 . The method according to  claim 15 , wherein the monitoring entity requests range confirmations or range proofs from terminals in the context of a sum check, and:
 applies a first sum check mode for anonymous masked electronic coin datasets,   applies a second sum check mode for pseudonymous masked electronic coin datasets.   
     
     
         24 . The method according to  claim 15 , wherein the monitoring entity checks a range proof for the value for each received modified coin dataset. 
     
     
         25 . The method according to  claim 15 , wherein the monitoring entity
 regularly or quasi-randomly requests range confirmations or range proofs from terminals, and/or   only after a number of coin data datasets received for a pseudonym requests a range confirmation or a range verification from the terminal device,   wherein the number is dependent on the terminal type and/or the coin value range.   
     
     
         26 . A terminal configured for directly transmitting electronic coin datasets between terminals having a computing unit configured for carrying out the terminal steps of the method according to  claim 15 . 
     
     
         27 . A monitoring entity configured for directly transmitting electronic coin datasets between terminals having a computing unit configured for carrying out the method according to  claim 15 , which in particular registers anonymous masked electronic coin datasets and registers pseudonymously sent masked electronic coin datasets. 
     
     
         28 . A payment system for exchanging monetary values, the payment system comprising:
 a monitoring layer with a database in which anonymous masked electronic coin datasets are stored; and   a direct transaction layer, with at least two terminals, in which the method according to  claim 15  may be performed.